Route Origin Authorization
$ rpki-client -vvf rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215212.roa
File: AS215212.roa (raw, json)
Hash identifier: xEoc6UVUgzYP3sHzzrxRtx8lNtWAHWc8/oOZISSR0Tw=
Subject key identifier: 25:A2:44:3F:54:95:16:47:AA:1B:6F:E2:9B:EA:78:9A:DF:6B:BD:BC
Certificate issuer: /CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Certificate serial: 4928B704CF21F283F511E223D8AC3D4FA39BF6DE
Authority key identifier: 7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject info access: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215212.roa
Signing time: Sun 19 Apr 2026 13:29:17 +0000
ROA not before: Sun 19 Apr 2026 13:24:17 +0000
ROA not after: Sun 18 Apr 2027 13:29:17 +0000
asID: 215212
IP address blocks: 2a0f:9400:6000::/48 maxlen: 48
2a0f:9400:600a::/48 maxlen: 48
2a0f:9400:6010::/48 maxlen: 48
2a0f:9400:6011::/48 maxlen: 48
2a0f:9400:6012::/48 maxlen: 48
2a0f:9400:6013::/48 maxlen: 48
2a0f:9400:6014::/48 maxlen: 48
2a0f:9400:6015::/48 maxlen: 48
2a0f:9400:6016::/48 maxlen: 48
2a0f:9400:6017::/48 maxlen: 48
2a0f:9400:6018::/48 maxlen: 48
2a0f:9400:6019::/48 maxlen: 48
2a0f:9400:6020::/48 maxlen: 48
2a0f:9400:6053::/48 maxlen: 48
2a0f:9400:60fe::/48 maxlen: 48
2a0f:9400:60ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:28:b7:04:cf:21:f2:83:f5:11:e2:23:d8:ac:3d:4f:a3:9b:f6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea5316dbdac01cd05d0eaa05a89c04da3e7398f
Validity
Not Before: Apr 19 13:24:17 2026 GMT
Not After : Apr 18 13:29:17 2027 GMT
Subject: CN=25A2443F54951647AA1B6FE29BEA789ADF6BBDBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:7f:94:f0:69:7f:bb:e5:ce:da:b2:f9:7a:
f6:45:ac:02:dd:9c:f3:ee:17:b9:c4:d6:e7:67:cf:
cd:27:27:ff:e9:4b:09:28:14:49:e6:f9:60:7e:82:
94:a9:96:93:b1:b4:67:45:1a:43:f3:29:cc:6b:fa:
44:1d:8d:02:a6:29:43:d4:d9:ff:b5:2d:17:fb:61:
ad:bf:ca:cf:46:e6:68:98:79:87:31:b5:fd:44:62:
11:27:7b:4d:cc:bd:58:30:38:2e:cf:7e:97:ad:8c:
f0:53:b4:4d:d6:41:63:76:ed:65:75:f8:a1:c9:e8:
d2:dc:50:aa:88:e5:92:ae:9e:69:12:74:44:39:a3:
92:6f:d5:3a:81:13:83:f6:80:28:3b:44:77:59:d4:
7c:03:9d:1a:7e:14:46:b0:35:11:f7:c6:95:09:da:
4c:55:54:01:f7:b9:f1:18:e3:86:bf:be:ce:71:e2:
c2:49:da:de:50:bb:e4:21:b6:5f:5b:2a:45:67:08:
9e:f5:c9:18:7a:d9:50:2e:e6:9a:76:6f:3c:95:56:
5c:60:8a:01:20:be:3e:70:d8:6a:9f:6e:23:1d:d3:
89:0e:86:80:39:19:39:89:30:9d:2f:fb:a1:0f:c4:
1a:56:18:e8:f3:c2:2d:d9:62:d7:26:88:d5:7e:cc:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A2:44:3F:54:95:16:47:AA:1B:6F:E2:9B:EA:78:9A:DF:6B:BD:BC
X509v3 Authority Key Identifier:
keyid:7E:A5:31:6D:BD:AC:01:CD:05:D0:EA:A0:5A:89:C0:4D:A3:E7:39:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/7EA5316DBDAC01CD05D0EAA05A89C04DA3E7398F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqUxbb2sAc0F0OqgWonATaPnOY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.admin.freerangecloud.com/repo/FRC-CA/5/AS215212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9400:6000::/48
2a0f:9400:600a::/48
2a0f:9400:6010::-2a0f:9400:6019:ffff:ffff:ffff:ffff:ffff
2a0f:9400:6020::/48
2a0f:9400:6053::/48
2a0f:9400:60fe::/47
Signature Algorithm: sha256WithRSAEncryption
76:a6:c5:12:d0:6c:07:7e:cc:fe:82:a4:b8:74:cb:dd:14:6c:
5a:19:6a:31:14:fe:75:5d:82:48:94:66:41:cd:bf:84:48:a8:
08:e7:b3:31:4c:75:da:4a:0c:dc:d2:ab:36:e9:b6:73:40:5c:
72:cb:c1:3f:94:ff:95:d8:55:a5:72:5f:6b:2b:38:f5:6f:2a:
ac:9d:97:3a:a0:f2:ce:f9:60:fe:ad:f9:33:6d:a6:99:ac:1f:
e6:b9:51:2c:b0:8e:3c:f0:59:3a:f4:f6:55:32:ce:9b:b8:ed:
ef:36:ea:0d:5b:20:8f:ef:37:a2:e0:9b:e5:57:bc:a3:f2:47:
f8:bb:f4:1f:fc:dc:39:39:12:b6:70:a4:ee:a5:c9:41:9a:cc:
27:a2:37:2e:09:01:0a:f0:c7:a9:72:d2:a5:c2:db:b2:13:83:
8b:f3:8a:db:a5:73:ff:91:ea:b7:16:44:7e:e6:c9:40:56:1e:
c1:c1:49:4b:41:a5:2a:54:d6:7c:74:96:c5:4e:57:dc:48:70:
64:66:1c:4e:65:77:cb:9b:93:5b:6b:c3:68:7a:84:30:57:dc:
35:94:e2:2f:5b:9b:7c:4f:6f:b2:31:5d:62:1b:de:4e:ca:e9:
f1:17:02:67:4d:94:1b:97:19:e2:6b:0b:2c:ca:3a:8b:66:e2:
51:47:94:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:07:30 2026 by rpki-client